Overview

Products Affected

Description

Installer of QuickTime for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).

Impact

Arbitrary code may be executed with the privilege of the user invoking the installer.

Solution

Do not use Installer of QuickTime for Windows
The developer has stated that the support of QuickTime for Windows has been discontinued thus recommends users to stop using Installer of QuickTime for Windows.